ClawHub

Dingtalk

v0.1.0

Extract and summarize titles, authors, updates, and content from publicly shared Dingtalk pages, apps, and group invitations without internal API access.

⭐ 0· 203·1 current·1 all-time
byClawKK@codekungfu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (extract and summarize public Dingtalk pages) match the SKILL.md: it describes extracting titles, authors, timestamps, content summaries and explicitly limits itself to publicly accessible pages without internal API access.
ℹ
Instruction Scope
Instructions stay within scope (fetch and parse public share/app/invite pages). The doc notes 'content is dynamically loaded, wait for rendering' which implies a need for a JS-capable fetch/render step (headless browser or renderer). The skill does not request browser binaries or list how rendering should occur — this is a mild operational gap but not a security incoherence.
✓
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is written to disk and no external packages are pulled.
✓
Credentials
No environment variables, credentials, or config paths are required. This is appropriate given the stated purpose of only handling public pages.
✓
Persistence & Privilege
always is false and model invocation is normal; the skill does not request persistent/privileged presence or modify other skills' settings.
Assessment
This skill appears coherent and limited to public Dingtalk content, but note: it will require network access and a way to render JavaScript-driven pages (e.g., a headless browser) which the platform/agent must provide. Before installing, confirm the agent environment can safely perform web rendering and scraping, obey robots.txt and Dingtalk's terms of service, and implement rate limiting to avoid being blocked. The skill does not request credentials — do not provide any enterprise tokens; if later you are asked for auth, treat that as a red flag.

Like a lobster shell, security has layers — review code before you run it.

latestvk97awbkkjvyg16wd9n9gp62v95831pes

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments